[google/syzkaller] 3f7aa5: dashboard/app: ignore commands if not explicitly a...

[Aleksandr Nogikh]

Branch: refs/heads/gh-readonly-queue/master/pr-7300-73a5278fc47101786fcce29507164fb59ac8afe3
Home: https://github.com/google/syzkaller
Commit: 3f7aa560a9a5fe31f2052ff31808aef0d4419806
https://github.com/google/syzkaller/commit/3f7aa560a9a5fe31f2052ff31808aef0d4419806
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2026-05-18 (Mon, 18 May 2026)

Changed paths:
M dashboard/app/email_test.go
M dashboard/app/reporting_email.go
M pkg/email/parser.go
M pkg/email/parser_test.go

Log Message:
-----------
dashboard/app: ignore commands if not explicitly addressed

When lore-relay replies to discussions with AI patches containing
`Reported-by: syzbot+hash@...`, users often reply `#syz upstream`
intended for the lore-relay bot.

Because syzkaller-upstream-moderation is CC'd, dashboard/app receives
the email. It finds the bug ID in the email body, assumes the command
was meant for it, and then complains that it "Can't upstream, this is
final destination." (or worse, might actually upstream a bug).

To prevent dashboard/app from hijacking discussions meant for other bots,
ignore all commands (except `#syz test`) if syzbot is not explicitly CC'd
with its unique `syzbot+hash@...` address.

Add the `pkg/email.Email.DirectlyAddressedTo` helper to correctly extract
and check the address context from the RawCc headers.

Tests included.



To unsubscribe from these emails, change your notification settings at https://github.com/google/syzkaller/settings/notifications

[Aleksandr Nogikh]

Branch: refs/heads/master